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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . ^ This communication is responsive to 3/16/2005 . 

2. S The allowed claim(s) is/are 1-8 and 19-22 . 

3. CD The drawings filed on are accepted by the Examiner. 

4. O Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

5. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

6. M CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) |3 including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date 03312005 . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

7. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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Examiner's Statement 

1 . The Applicant is required to submit formal drawings to the Draftsperson, pursuant to 
allowability of the application. 

Reasons For Allowance 

2. Status of Claims: In the previous office action dated 12/16/2004, Examiner rejected 
claims 9-18. In the previous office action 12/16/2004, the Examiner indicated that claims 1-8, 
and 19-22 are allowable. The Applicant has canceled claims 9-18 which were previously 
rejected. Claims 1-8, and 19-22 are allowable for the features and reasons listed below: 

3. In the prior art of Networking, prior art fails to disclose or suggest, "using the decrypted 
first value to retrieve a third value from a second copy of the password table"; "encrypting the 
third value according to a second copy of the encryption key and sending the encrypted third 
value back to a switch of the SAN"; "decrypting the third value according to the first copy of the 
encryption key and comparing the decrypted third value with the second value"; "and allowing 
access to the SAN if the third value and the second value match"; an Example of prior art in 
networking that does not disclose this is, Blumenau et al. Blumenau et al. discloses a storage 
access network/Fibre network(SAN) that discloses an authentication method, which stores the 
.unique.secret.kev_ in the host and port_Co pies of the key s are stored in a list in the host and port. 
The port includes random numbers(i.e. values). The random numbers and the keys are used by 
host and port to authenticate. The host controller receives the random number and request 
verification from the port adapter. The port adapter encrypts the random number with its copy of 
the host controller's key. The port adapter compares the value from the host controller and if 
they match access to the storage system is granted. The random number is the first value of 
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Blumenau, and the encryption key is the password table. Blumenau does not suggest or disclose 
a third value, much less and second copy of the encryption key. Blumenau et al. fails to disclose 
or suggest, the claim limitations, "using the decrypted first value to retrieve a third value from a 
second copy of the password table"; "encrypting the third value according to a second copy of 
the encryption key and sending the encrypted third value back to a switch of the SAN"; 
"decrypting the third value according to the first copy of the encryption key and comparing the 
decrypted third value with the second value"; "and allowing access to the SAN if the third value 
and the second value match". 

4. In the art of Security, prior art fails to disclose or suggest, "using the decrypted first value 
to retrieve a third value from a second copy of the password table"; "encrypting the third value 
according to a second copy of the encryption key and sending the encrypted third value back to a 
switch of the SAN"; "decrypting the third value according to the first copy of the encryption key 
and comparing the decrypted third value with the second value"; and allowing access to the SAN 
if the third value and the second value match". An example of prior art that fails to disclose or 
suggest the limitations above, is Angelo et al Angelo discloses providing authentication to 
insure that a message or data received by one device from another is authentic. The devices both 
use-a-set-Q£keys4o-authenticate_messag es and data. T he first device transmits the message to the 
second device, and the second device receives the message and decrypts the message to 
determine if it is valid. In the prior art of Security, and more specifically, Angelo does not 
disclose a second value, or a third value. Angelo only discloses a first value, which is using a 
key to encrypt a message and decrypt. Furthermore, there is no password table suggested or 
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disclosed in Angelo. Angelo's values are not retrieved for a password table, because there is no 
table in Angelo, and no suggestion of a password table. 

5. In the art of storage access and control, prior art fails to disclose "using the decrypted 
first value to retrieve a third value from a second copy of the password table"; "encrypting the 
third value according to a second copy of the encryption key and sending the encrypted third 
value back to a switch of the SAN"; "decrypting the third value according to the first copy of the 
encryption key and comparing the decrypted third value with the second value". An example in 
the art of storage access and control that does not disclose the limitations above, is Prust. Prust 
discloses a storage network that includes a RAID, for storing data files. The storage network of 
Prust discloses a pool of virtual storage areas that can be individually assignable to different 
users. When a user request for a virtual storage area, the storage server prompts the user for a 
password. In Prust, upon approval, the storage network allocated a storage area to the user. Prior 
art of storage access control, fails to disclose or suggest, "using the decrypted first value to 
retrieve a third value from a second copy of the password table"; "encrypting the third value 
according to a second copy of the encryption key and sending the encrypted third value back to a 
switch of the SAN"; "decrypting the third value according to the first copy of the encryption key 
-and-comparinp.the_decrypted third value with the second v alue". 

6. In Non-patent literature, prior art fails to teach or suggest, "using the decrypted first 
value to retrieve a third value from a second copy of the password table"; "encrypting the third 
value according to a second copy of the encryption key and sending the encrypted third value 
back to a switch of the SAN"; "decrypting the third value according to the first copy of the 
encryption key and comparing the decrypted third value with the second value". An example in 
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non-patent literature that fails to teach the limitations above is, PC Magazine. PC Magazine 
teaches that SAN devices are drive subsystems that are linked directly to one or more servers via 
a Fibre Channel. Prior art of non-patent literature, fails to teach or suggest, "using the decrypted 
first value to retrieve a third value from a second copy of the password table"; "encrypting the 
third value according to a second copy of the encryption key and sending the encrypted third 
value back to a switch of the SAN"; "decrypting the third value according to the first copy of the 
encryption key and comparing the decrypted third value with the second value". 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E Jackson whose telephone number is (571) 272-3791. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Friday's. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
mav-be-Qbtained_from_eit her Private PAIR or P ublic PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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